[Bug 2051574] Re: gnome-shell-portal-helper crashed with SIGTRAP in waitUntilSyncedOrDie() from WebKit::XDGDBusProxy::launch() ["bwrap: setting up uid map: Permission denied" ; "Failed to fully launch

2024-08-16 Thread Marc Deslauriers
I'll let someone else decide if this bug is still worth fixing even
though we aren't using the helper anymore.

-- 
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to gnome-shell in Ubuntu.
https://bugs.launchpad.net/bugs/2051574

Title:
  gnome-shell-portal-helper crashed with SIGTRAP in
  waitUntilSyncedOrDie() from WebKit::XDGDBusProxy::launch() ["bwrap:
  setting up uid map: Permission denied" ; "Failed to fully launch dbus-
  proxy: Child process exited with code 1"]

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/apparmor/+bug/2051574/+subscriptions


-- 
desktop-bugs mailing list
desktop-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/desktop-bugs

[Bug 2051574] Re: gnome-shell-portal-helper crashed with SIGTRAP in waitUntilSyncedOrDie() from WebKit::XDGDBusProxy::launch() ["bwrap: setting up uid map: Permission denied" ; "Failed to fully launch

2024-08-16 Thread Marc Deslauriers
Ah yes, this should be fixed now because of the security update. I meant
to update this bug, but forgot. Thanks for noticing.

-- 
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to gnome-shell in Ubuntu.
https://bugs.launchpad.net/bugs/2051574

Title:
  gnome-shell-portal-helper crashed with SIGTRAP in
  waitUntilSyncedOrDie() from WebKit::XDGDBusProxy::launch() ["bwrap:
  setting up uid map: Permission denied" ; "Failed to fully launch dbus-
  proxy: Child process exited with code 1"]

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/apparmor/+bug/2051574/+subscriptions


-- 
desktop-bugs mailing list
desktop-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/desktop-bugs

[Bug 2077001] Re: Clipboard contents available at locked screen

2024-08-14 Thread Marc Deslauriers
Thanks!

** Information type changed from Private Security to Public Security

-- 
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to gnome-shell in Ubuntu.
https://bugs.launchpad.net/bugs/2077001

Title:
  Clipboard contents available at locked screen

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/gnome-shell/+bug/2077001/+subscriptions


-- 
desktop-bugs mailing list
desktop-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/desktop-bugs

[Bug 2039354] Re: GDM does not prevent users with login shell /sbin/nologin from logging on

2024-05-24 Thread Marc Deslauriers
Adding gnome-session as this is where the logic exists.

I don't see any changes in the latest gnome-session script. Could you
please file a bug with the upstream gnome-session developers here?:

https://gitlab.gnome.org/GNOME/gnome-session/-/issues

Thanks!

** Also affects: gnome-session (Ubuntu)
   Importance: Undecided
   Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to gnome-session in Ubuntu.
https://bugs.launchpad.net/bugs/2039354

Title:
  GDM does not prevent users with login shell /sbin/nologin from logging
  on

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/gdm3/+bug/2039354/+subscriptions


-- 
desktop-bugs mailing list
desktop-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/desktop-bugs

[Bug 2062916] Re: evolution has undefined symbol in newest libwebkit2gtk

2024-04-22 Thread Marc Deslauriers
That is pretty odd, I can't reproduce this issue on jammy.

what's the output of "ldd /lib/x86_64-linux-
gnu/libwebkit2gtk-4.0.so.37"?

-- 
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to evolution in Ubuntu.
https://bugs.launchpad.net/bugs/2062916

Title:
  evolution  has undefined symbol in newest libwebkit2gtk

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/evolution/+bug/2062916/+subscriptions


-- 
desktop-bugs mailing list
desktop-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/desktop-bugs

[Bug 2051543] Re: When I use a keyboard shortcut to lower a window, the window retains its keyboard focus.

2024-04-12 Thread Marc Deslauriers
** Information type changed from Public Security to Public

-- 
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to gnome-shell in Ubuntu.
https://bugs.launchpad.net/bugs/2051543

Title:
  When I use a keyboard shortcut to lower a window, the window retains
  its keyboard focus.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/gnome-shell/+bug/2051543/+subscriptions


-- 
desktop-bugs mailing list
desktop-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/desktop-bugs

[Bug 2047595] Re: sound control panel security

2024-01-19 Thread Marc Deslauriers
** Package changed: ubuntu-meta (Ubuntu) => gnome-shell (Ubuntu)

-- 
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to gnome-shell in Ubuntu.
https://bugs.launchpad.net/bugs/2047595

Title:
  sound control panel security

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/gnome-shell/+bug/2047595/+subscriptions


-- 
desktop-bugs mailing list
desktop-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/desktop-bugs

[Bug 2042350] [NEW] When switching workspaces with mouse, no dot in indicator

2023-10-31 Thread Marc Deslauriers
Public bug reported:

When switching between workspaces with ctrl-alt-arrow, there is an
indicator that pops up with a bright dot highlighting which workspace is
being switched to. When switching between workspaces by scrolling the
mouse wheel over the "show applications" icon, the indicator pops up but
doesn't draw the bright dot to indicate which workspace is becoming
active.

ProblemType: Bug
DistroRelease: Ubuntu 22.04
Package: gnome-shell-extension-ubuntu-dock 72~ubuntu5.22.04.2.1
ProcVersionSignature: Ubuntu 6.1.0-1025.25-oem 6.1.57
Uname: Linux 6.1.0-1025-oem x86_64
ApportVersion: 2.20.11-0ubuntu82.5
Architecture: amd64
CasperMD5CheckResult: pass
CurrentDesktop: ubuntu:GNOME
Date: Tue Oct 31 13:07:17 2023
InstallationDate: Installed on 2023-10-24 (7 days ago)
InstallationMedia: Ubuntu 22.04.3 LTS "Jammy Jellyfish" - Release amd64 
(20230807.2)
PackageArchitecture: all
SourcePackage: gnome-shell-extension-ubuntu-dock
UpgradeStatus: No upgrade log present (probably fresh install)

** Affects: gnome-shell-extension-ubuntu-dock (Ubuntu)
 Importance: Undecided
 Status: New


** Tags: amd64 apport-bug jammy wayland-session

-- 
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to gnome-shell-extension-ubuntu-dock
in Ubuntu.
https://bugs.launchpad.net/bugs/2042350

Title:
  When switching workspaces with mouse, no dot in indicator

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/gnome-shell-extension-ubuntu-dock/+bug/2042350/+subscriptions


-- 
desktop-bugs mailing list
desktop-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/desktop-bugs

[Bug 2036310] Re: gnome shell crash after sleep mode

2023-10-13 Thread Marc Deslauriers
Thanks for taking the time to report this bug and helping to make Ubuntu
better. We appreciate the difficulties you are facing, but this appears
to be a "regular" (non-security) bug.  I have unmarked it as a security
issue since this bug does not show evidence of allowing attackers to
cross privilege boundaries nor directly cause loss of data/privacy.
Please feel free to report any other bugs you may find.

** Information type changed from Private Security to Public

-- 
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to gnome-shell in Ubuntu.
https://bugs.launchpad.net/bugs/2036310

Title:
  gnome shell crash after sleep mode

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/gnome-shell/+bug/2036310/+subscriptions


-- 
desktop-bugs mailing list
desktop-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/desktop-bugs

[Bug 2036746] Re: CVE-2023-43090: avoid exposing window previews on lock screen via keyboard

2023-09-20 Thread Marc Deslauriers
** Changed in: gnome-shell (Ubuntu Lunar)
 Assignee: (unassigned) => Marc Deslauriers (mdeslaur)

-- 
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to gnome-shell in Ubuntu.
https://bugs.launchpad.net/bugs/2036746

Title:
  CVE-2023-43090: avoid exposing window previews on lock screen via
  keyboard

To manage notifications about this bug go to:
https://bugs.launchpad.net/gnome-shell/+bug/2036746/+subscriptions


-- 
desktop-bugs mailing list
desktop-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/desktop-bugs

[Bug 2029361] Re: evolution does not start

2023-08-02 Thread Marc Deslauriers
I'm glad you figured it out, thanks for updating the bug!

I'll close it now since this looks like a configuration issue.

** Changed in: evolution (Ubuntu)
   Status: New => Invalid

-- 
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to evolution in Ubuntu.
https://bugs.launchpad.net/bugs/2029361

Title:
  evolution does not start

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/evolution/+bug/2029361/+subscriptions


-- 
desktop-bugs mailing list
desktop-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/desktop-bugs

[Bug 2029361] Re: evolution does not start

2023-08-02 Thread Marc Deslauriers
Hi,

Thanks for reporting this issue.

I can't seem to reproduce this issue on Ubuntu 22.04. I do see the
"WEBKIT_FORCE_SANDBOX no longer allows disabling the sandbox." message,
which is normal since that workaround is no longer required, but
evolution starts fine and works as expected.

Could you make sure all available updates are properly installed by
doing "apt update;apt upgrade" and then making sure no stray processes
are stuck by rebooting?

-- 
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to evolution in Ubuntu.
https://bugs.launchpad.net/bugs/2029361

Title:
  evolution does not start

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/evolution/+bug/2029361/+subscriptions


-- 
desktop-bugs mailing list
desktop-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/desktop-bugs

[Bug 2021533] Re: evolution 3.44: emails are unreadable with webkit2gtk 2.40

2023-07-31 Thread Marc Deslauriers
** Changed in: evolution (Ubuntu Kinetic)
   Status: Triaged => Won't Fix

** Changed in: evolution (Ubuntu Jammy)
   Status: Fix Committed => Fix Released

-- 
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to evolution in Ubuntu.
https://bugs.launchpad.net/bugs/2021533

Title:
  evolution 3.44: emails are unreadable with webkit2gtk  2.40

To manage notifications about this bug go to:
https://bugs.launchpad.net/evolution/+bug/2021533/+subscriptions


-- 
desktop-bugs mailing list
desktop-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/desktop-bugs

[Bug 1998060] Re: CVE-2022-37290: Pasted zip archive/invalid file causes NPD

2023-07-25 Thread Marc Deslauriers
Kinetic has now reached end-of-life. There is nothing else to sponsor in
this bug for now.

I am unsubscribing ubuntu-security-sponsors. If a new debdiff is
attached for sponsoring, please re-subscribe the team. Thanks!

** Changed in: nemo (Ubuntu Kinetic)
   Status: In Progress => Won't Fix

** Changed in: caja (Ubuntu Kinetic)
   Status: New => Won't Fix

-- 
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to nautilus in Ubuntu.
https://bugs.launchpad.net/bugs/1998060

Title:
  CVE-2022-37290: Pasted zip archive/invalid file causes NPD

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/caja/+bug/1998060/+subscriptions


-- 
desktop-bugs mailing list
desktop-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/desktop-bugs

[Bug 2022002] Re: browsers are not working suddenly...

2023-06-09 Thread Marc Deslauriers
Thanks for taking the time to report this bug and helping to make Ubuntu
better. We appreciate the difficulties you are facing, but this appears
to be a "regular" (non-security) bug.  I have unmarked it as a security
issue since this bug does not show evidence of allowing attackers to
cross privilege boundaries nor directly cause loss of data/privacy.
Please feel free to report any other bugs you may find.

** Information type changed from Private Security to Public

-- 
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to gnome-shell in Ubuntu.
https://bugs.launchpad.net/bugs/2022002

Title:
  browsers are not working suddenly...

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/gnome-shell/+bug/2022002/+subscriptions


-- 
desktop-bugs mailing list
desktop-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/desktop-bugs

[Bug 2022391] Re: security breach

2023-06-09 Thread Marc Deslauriers
** Package changed: ubuntu => gnome-control-center (Ubuntu)

** Information type changed from Public Security to Public

-- 
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to gnome-control-center in Ubuntu.
https://bugs.launchpad.net/bugs/2022391

Title:
  security breach

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/gnome-control-center/+bug/2022391/+subscriptions


-- 
desktop-bugs mailing list
desktop-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/desktop-bugs

[Bug 1998060] Re: CVE-2022-37290: Pasted zip archive/invalid file causes NPD

2023-05-31 Thread Marc Deslauriers
Oh, that would be great, I could release them all at once. Thanks!

-- 
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to nautilus in Ubuntu.
https://bugs.launchpad.net/bugs/1998060

Title:
  CVE-2022-37290: Pasted zip archive/invalid file causes NPD

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/caja/+bug/1998060/+subscriptions


-- 
desktop-bugs mailing list
desktop-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/desktop-bugs

[Bug 2001503] Re: gnome-control-center crashed with SIGSEGV -- pipewire

2023-03-17 Thread Marc Deslauriers
Thanks for taking the time to report this bug and helping to make Ubuntu
better. We appreciate the difficulties you are facing, but this appears
to be a "regular" (non-security) bug.  I have unmarked it as a security
issue since this bug does not show evidence of allowing attackers to
cross privilege boundaries nor directly cause loss of data/privacy.
Please feel free to report any other bugs you may find.

** Information type changed from Private Security to Public

-- 
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to gnome-control-center in Ubuntu.
https://bugs.launchpad.net/bugs/2001503

Title:
  gnome-control-center crashed with SIGSEGV -- pipewire

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/gnome-control-center/+bug/2001503/+subscriptions


-- 
desktop-bugs mailing list
desktop-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/desktop-bugs

[Bug 2008662] Re: How do I fix error : "Appear a prohibit icon

2023-03-17 Thread Marc Deslauriers
Thanks for taking the time to report this bug and helping to make Ubuntu
better. We appreciate the difficulties you are facing, but this appears
to be a "regular" (non-security) bug.  I have unmarked it as a security
issue since this bug does not show evidence of allowing attackers to
cross privilege boundaries nor directly cause loss of data/privacy.
Please feel free to report any other bugs you may find.

** Information type changed from Private Security to Public

-- 
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to gnome-shell-extension-appindicator
in Ubuntu.
https://bugs.launchpad.net/bugs/2008662

Title:
  How do I fix error : "Appear a prohibit icon

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/gnome-shell-extension-appindicator/+bug/2008662/+subscriptions


-- 
desktop-bugs mailing list
desktop-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/desktop-bugs

[Bug 1998060] Re: CVE-2022-37290: Pasted zip archive/invalid file causes NPD

2023-02-17 Thread Marc Deslauriers
The update is for kinetic, did you test it on kinetic?

-- 
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to nautilus in Ubuntu.
https://bugs.launchpad.net/bugs/1998060

Title:
  CVE-2022-37290: Pasted zip archive/invalid file causes NPD

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/caja/+bug/1998060/+subscriptions


-- 
desktop-bugs mailing list
desktop-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/desktop-bugs

[Bug 1998060] Re: CVE-2022-37290: Pasted zip archive/invalid file causes NPD

2023-02-09 Thread Marc Deslauriers
ACK on the debdiff in comment #8. I have slightly adjusted it to add the
bug number to the changelog and to fix the urls in the patch. I have
uploaded it to the security team PPA here:

https://launchpad.net/~ubuntu-security-proposed/+archive/ubuntu/ppa

Please test it to make sure it works properly, and comment back in this
bug, at which point I will release it as a security update. Thanks!

-- 
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to nautilus in Ubuntu.
https://bugs.launchpad.net/bugs/1998060

Title:
  CVE-2022-37290: Pasted zip archive/invalid file causes NPD

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/caja/+bug/1998060/+subscriptions


-- 
desktop-bugs mailing list
desktop-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/desktop-bugs

[Bug 1982422] Re: Multiple vulnerabilities in Bionic, Focal and Jammy

2023-02-09 Thread Marc Deslauriers
There are no updated debdiffs to sponsor, unsubscribing ubuntu-security-
sponsors for now. Please resubscribe the group once updated debdiffs
have been attached to this bug. Thanks!

-- 
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to gimp in Ubuntu.
https://bugs.launchpad.net/bugs/1982422

Title:
  Multiple vulnerabilities in Bionic, Focal and Jammy

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/gimp/+bug/1982422/+subscriptions


-- 
desktop-bugs mailing list
desktop-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/desktop-bugs

[Bug 1993214] Re: [jammy] Update gjs to 1.74 using mozjs102 102.3

2023-02-07 Thread Marc Deslauriers
We are not going to release these yet, we are blocked on comment #8.

-- 
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to gjs in Ubuntu.
https://bugs.launchpad.net/bugs/1993214

Title:
  [jammy] Update gjs to 1.74 using mozjs102 102.3

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/gjs/+bug/1993214/+subscriptions


-- 
desktop-bugs mailing list
desktop-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/desktop-bugs

[Bug 1993214] Re: [jammy] Update gjs to 1.74 using mozjs102 102.3

2023-02-06 Thread Marc Deslauriers
The image builds are pulling in -proposed?

-- 
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to gjs in Ubuntu.
https://bugs.launchpad.net/bugs/1993214

Title:
  [jammy] Update gjs to 1.74 using mozjs102 102.3

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/gjs/+bug/1993214/+subscriptions


-- 
desktop-bugs mailing list
desktop-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/desktop-bugs

[Bug 1993214] Re: [jammy] Update gjs to 1.74 using mozjs102 102.3

2022-12-15 Thread Marc Deslauriers
mozjs102 and gjs packages have been uploaded for jammy, and mozjs102 for
kinetic, into the security team PPA here:

https://launchpad.net/~ubuntu-security-
proposed/+archive/ubuntu/ppa/+packages

Once they are finished building, they can be pocket-copied by an archive
admin into the -proposed pocket for more testing.

Thanks!

-- 
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to gjs in Ubuntu.
https://bugs.launchpad.net/bugs/1993214

Title:
  [jammy] Update gjs to 1.74 using mozjs102 102.3

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/gjs/+bug/1993214/+subscriptions


-- 
desktop-bugs mailing list
desktop-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/desktop-bugs

[Bug 1993214] Re: [jammy] Update gjs to 1.74 using mozjs102 102.3

2022-12-12 Thread Marc Deslauriers
Looks like a few more CVEs have been published between 102.3 in karmic
and 102.5 in lunar:

102.4 CVE-2022-42928 bug 1791520
102.5 CVE-2022-45406 bug 1791975
102.5 CVE-2022-45409 bug 1796901

Perhaps we should move to 102.5?

I have to admit, bumping to a new major release of mozjs sounds risky.
What are the plans to test all the arbitrary gnome-shell plugins that
could be installed in user environments? How well does gnome-shell
handle a plugin that could crash on startup if there is an
incompatibility with a newer mozjs version?

** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2022-42928

** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2022-45406

** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2022-45409

-- 
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to gjs in Ubuntu.
https://bugs.launchpad.net/bugs/1993214

Title:
  [jammy] Update gjs to 1.74 using mozjs102 102.3

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/gjs/+bug/1993214/+subscriptions


-- 
desktop-bugs mailing list
desktop-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/desktop-bugs

[Bug 1983778] Re: Major security issue in Ubuntu Desktop default config - Removable Media

2022-09-23 Thread Marc Deslauriers
I personally don't think the reasons you've listed above are good enough
to change the default setting, but please file a bug with the upstream
project and you can convince them to change them:

https://gitlab.gnome.org/GNOME/gnome-control-center/-/issues

Once you've filed a bug with the GNOME project, please paste the bug
number here.

Thanks!

** Changed in: gnome-control-center (Ubuntu)
   Status: Incomplete => Confirmed

** Changed in: gnome-control-center (Ubuntu)
   Importance: Undecided => Wishlist

-- 
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to gnome-control-center in Ubuntu.
https://bugs.launchpad.net/bugs/1983778

Title:
  Major security issue in Ubuntu Desktop default config - Removable
  Media

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/gnome-control-center/+bug/1983778/+subscriptions


-- 
desktop-bugs mailing list
desktop-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/desktop-bugs

[Bug 1920643] Re: Notification popup before login -> app started w/o login

2022-08-24 Thread Marc Deslauriers
** Changed in: gdm3 (Ubuntu)
   Status: New => Confirmed

-- 
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to gdm3 in Ubuntu.
https://bugs.launchpad.net/bugs/1920643

Title:
  Notification popup before login -> app started w/o login

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/gdm3/+bug/1920643/+subscriptions


-- 
desktop-bugs mailing list
desktop-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/desktop-bugs

[Bug 1930140] Re: GUI "Extract Here" bug - loop until disk is full

2022-08-24 Thread Marc Deslauriers
Thanks for taking the time to report this bug and helping to make Ubuntu
better. We appreciate the difficulties you are facing, but this appears
to be a "regular" (non-security) bug.  I have unmarked it as a security
issue since this bug does not show evidence of allowing attackers to
cross privilege boundaries nor directly cause loss of data/privacy.
Please feel free to report any other bugs you may find.

** Information type changed from Public Security to Public

-- 
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to file-roller in Ubuntu.
https://bugs.launchpad.net/bugs/1930140

Title:
  GUI "Extract Here"  bug - loop until disk is full

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/file-roller/+bug/1930140/+subscriptions


-- 
desktop-bugs mailing list
desktop-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/desktop-bugs

[Bug 1987162] Re: 43: New Device Security feature is confusing and unhelpful currently

2022-08-22 Thread Marc Deslauriers
Another issue to consider here is that there is no secure way to display
the information in the first place. If some of those settings are
disabled, malware can simply modify the app to display a green checkbox
next to Level 3, leading to a false sense of security.

-- 
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to gnome-control-center in Ubuntu.
https://bugs.launchpad.net/bugs/1987162

Title:
  43: New Device Security feature is confusing and unhelpful currently

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/gnome-control-center/+bug/1987162/+subscriptions


-- 
desktop-bugs mailing list
desktop-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/desktop-bugs

[Bug 1987162] Re: 43: New Device Security feature is confusing and unhelpful currently

2022-08-20 Thread Marc Deslauriers
I don't understand not only why those advanced features would be exposed
in a GUI, but why ordinary users would care at all about most of those
settings.

If we're going to expose "security information" to users, we should
probably start by showing basic stuff, like if they are properly getting
security updates, if remote login via ssh is turned on with passwords
instead of certificates, whether they are using disk encryption or not,
etc.

If regular users can't easily fix the issues listed in there, from the
GUI itself, I don't think it's appropriate to display that in the
settings app.

-- 
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to gnome-control-center in Ubuntu.
https://bugs.launchpad.net/bugs/1987162

Title:
  43: New Device Security feature is confusing and unhelpful currently

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/gnome-control-center/+bug/1987162/+subscriptions


-- 
desktop-bugs mailing list
desktop-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/desktop-bugs

[Bug 1982422] Re: Multiple vulnerabilities in Bionic, Focal and Jammy

2022-08-09 Thread Marc Deslauriers
I took a look at the debdiffs in #2, #3, and #8, and here are my
comments:

For Bionic:

- The package doesn't build with the debdiff provided. Please fix and make sure 
it builds before submitting it again.
- In CVE-2022-32990-2.patch, you dropped the section that patches 
xcf_load_buffer, but in Bionic, the function is called xcf_load_hierarchy, 
please add the section back and patch the appropriate function.

For Focal:
- The patch for CVE-2018-12713 is missing, please add it.

For Jammy:

- The patch for CVE-2018-12713 is missing, please add it.
- You seemed to have bumped the version of gegl required in the debian/control 
file for no reason, and it is not mentioned in the changelog. Please remove 
this change.

Once those changes are done and new debdiffs have been attached, please
detail the testing that you performed to make sure Gimp still works,
thanks!

-- 
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to gimp in Ubuntu.
https://bugs.launchpad.net/bugs/1982422

Title:
  Multiple vulnerabilities in Bionic, Focal and Jammy

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/gimp/+bug/1982422/+subscriptions


-- 
desktop-bugs mailing list
desktop-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/desktop-bugs

[Bug 1955362] Re: epiphany December 2021 XSS issues

2022-08-08 Thread Marc Deslauriers
ACK on the debdiff in comment #3. It is building in the security team
PPA here:

https://launchpad.net/~ubuntu-security-
proposed/+archive/ubuntu/ppa/+packages

Once it has finished building, please test it and detail the testing
performed in this bug, and we will release it as a security update.
Thanks!

-- 
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to epiphany-browser in Ubuntu.
https://bugs.launchpad.net/bugs/1955362

Title:
  epiphany December 2021 XSS issues

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/epiphany-browser/+bug/1955362/+subscriptions


-- 
desktop-bugs mailing list
desktop-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/desktop-bugs

[Bug 1969851] Re: CVE-2022-29536 epiphany

2022-08-08 Thread Marc Deslauriers
ACK on the debdiff in comment #2. It is building in the security team
PPA here:

https://launchpad.net/~ubuntu-security-
proposed/+archive/ubuntu/ppa/+packages

Once it has finished building, please test it and detail the testing
performed in this bug, and we will release it as a security update.
Thanks!

-- 
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to epiphany-browser in Ubuntu.
https://bugs.launchpad.net/bugs/1969851

Title:
  CVE-2022-29536 epiphany

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/epiphany-browser/+bug/1969851/+subscriptions


-- 
desktop-bugs mailing list
desktop-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/desktop-bugs

[Bug 1974250] Re: ~/.pam_environment gets created as owned by root

2022-05-24 Thread Marc Deslauriers
** Information type changed from Private Security to Public Security

** Also affects: accountsservice (Ubuntu Jammy)
   Importance: Undecided
   Status: New

** Also affects: accountsservice (Ubuntu Kinetic)
   Importance: High
   Status: Fix Released

** Changed in: accountsservice (Ubuntu Jammy)
   Status: New => Fix Released

** Changed in: accountsservice (Ubuntu Kinetic)
   Status: Fix Released => Confirmed

-- 
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to accountsservice in Ubuntu.
https://bugs.launchpad.net/bugs/1974250

Title:
  ~/.pam_environment gets created as owned by root

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/accountsservice/+bug/1974250/+subscriptions


-- 
desktop-bugs mailing list
desktop-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/desktop-bugs

[Bug 1971415] Re: Remote desktop is automatically enabled after login

2022-05-18 Thread Marc Deslauriers
This patch is still broken. The same thing happens with VNC:

1- Turn on remote desktop, turn on VNC.
2- Only turn off remote desktop while leaving VNC checked
3- Reboot
4- The VNC port is listening to connections even though remote desktop says off 
in the control center.

-- 
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to gnome-control-center in Ubuntu.
https://bugs.launchpad.net/bugs/1971415

Title:
  Remote desktop is automatically enabled after login

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/gnome-control-center/+bug/1971415/+subscriptions


-- 
desktop-bugs mailing list
desktop-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/desktop-bugs

[Bug 1964795] Re: gnome-keyring-daemon crashed with signal 7

2022-03-30 Thread Marc Deslauriers
Thanks for taking the time to report this bug and helping to make Ubuntu
better. We appreciate the difficulties you are facing, but this appears
to be a "regular" (non-security) bug.  I have unmarked it as a security
issue since this bug does not show evidence of allowing attackers to
cross privilege boundaries nor directly cause loss of data/privacy.
Please feel free to report any other bugs you may find.

** Information type changed from Private Security to Public

-- 
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to gnome-keyring in Ubuntu.
https://bugs.launchpad.net/bugs/1964795

Title:
  gnome-keyring-daemon crashed with signal 7

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/gnome-keyring/+bug/1964795/+subscriptions


-- 
desktop-bugs mailing list
desktop-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/desktop-bugs

[Bug 1965686] Re: After the laptop comes out of sleep mode, the desktop environment for some reason breaks and appears crashes window

2022-03-30 Thread Marc Deslauriers
** Information type changed from Private Security to Public

-- 
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to gnome-shell in Ubuntu.
https://bugs.launchpad.net/bugs/1965686

Title:
  After the laptop comes out of sleep mode, the desktop environment for
  some reason breaks and appears crashes window

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/gnome-shell/+bug/1965686/+subscriptions


-- 
desktop-bugs mailing list
desktop-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/desktop-bugs

[Bug 1965869] Re: Screen only partially locked. Password promt was visible, but switching to window and typing eg in terminal was possible

2022-03-30 Thread Marc Deslauriers
** Package changed: ubuntu => gnome-shell (Ubuntu)

** Information type changed from Private Security to Public

-- 
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to gnome-shell in Ubuntu.
https://bugs.launchpad.net/bugs/1965869

Title:
  Screen only partially locked. Password promt was visible, but
  switching to window and typing eg in terminal was possible

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/gnome-shell/+bug/1965869/+subscriptions


-- 
desktop-bugs mailing list
desktop-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/desktop-bugs

[Bug 1959591] Re: Out-of-bounds read during processing of a password-protected PDF file

2022-02-18 Thread Marc Deslauriers
** Changed in: poppler (Ubuntu)
   Status: New => Confirmed

** Changed in: poppler (Ubuntu)
   Importance: Undecided => Low

-- 
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to poppler in Ubuntu.
https://bugs.launchpad.net/bugs/1959591

Title:
  Out-of-bounds read during processing of a password-protected PDF file

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/poppler/+bug/1959591/+subscriptions


-- 
desktop-bugs mailing list
desktop-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/desktop-bugs

[Bug 1946578] Re: Update for CVE-2021-41133

2021-12-14 Thread Marc Deslauriers
Thanks for testing!

https://ubuntu.com/security/notices/USN-5191-1

** Changed in: flatpak (Ubuntu)
   Status: In Progress => Fix Released

-- 
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to flatpak in Ubuntu.
https://bugs.launchpad.net/bugs/1946578

Title:
  Update for CVE-2021-41133

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/flatpak/+bug/1946578/+subscriptions


-- 
desktop-bugs mailing list
desktop-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/desktop-bugs

[Bug 1945086] Re: nautilus crashed with SIGSEGV in delete_outdated_error_traps().

2021-11-23 Thread Marc Deslauriers
Thanks for taking the time to report this bug and helping to make Ubuntu
better. We appreciate the difficulties you are facing, but this appears
to be a "regular" (non-security) bug.  I have unmarked it as a security
issue since this bug does not show evidence of allowing attackers to
cross privilege boundaries nor directly cause loss of data/privacy.
Please feel free to report any other bugs you may find.

** Information type changed from Private Security to Public

-- 
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to nautilus in Ubuntu.
https://bugs.launchpad.net/bugs/1945086

Title:
  nautilus crashed with SIGSEGV in delete_outdated_error_traps().

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/nautilus/+bug/1945086/+subscriptions


-- 
desktop-bugs mailing list
desktop-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/desktop-bugs

[Bug 1945388] Re: opening application steals focus from authenticate window

2021-11-23 Thread Marc Deslauriers
** Package changed: ubuntu => gnome-shell (Ubuntu)

** Information type changed from Private Security to Public

-- 
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to gnome-shell in Ubuntu.
https://bugs.launchpad.net/bugs/1945388

Title:
  opening application steals focus from authenticate window

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/gnome-shell/+bug/1945388/+subscriptions


-- 
desktop-bugs mailing list
desktop-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/desktop-bugs

[Bug 1949225] Re: screen lock is not working on suspend

2021-11-23 Thread Marc Deslauriers
** Package changed: ubuntu => gnome-shell (Ubuntu)

** Information type changed from Private Security to Public

-- 
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to gnome-shell in Ubuntu.
https://bugs.launchpad.net/bugs/1949225

Title:
  screen lock is not working on suspend

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/gnome-shell/+bug/1949225/+subscriptions


-- 
desktop-bugs mailing list
desktop-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/desktop-bugs

[Bug 1950035] Re: suspend does not lock in 20.04

2021-11-23 Thread Marc Deslauriers
** Package changed: linux (Ubuntu) => gnome-shell (Ubuntu)

** Information type changed from Private Security to Public

-- 
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to gnome-shell in Ubuntu.
https://bugs.launchpad.net/bugs/1950035

Title:
  suspend does not lock in 20.04

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/gnome-shell/+bug/1950035/+subscriptions


-- 
desktop-bugs mailing list
desktop-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/desktop-bugs

[Bug 1951098] Re: security issue!

2021-11-23 Thread Marc Deslauriers
** Package changed: ubuntu => gnome-shell (Ubuntu)

** Summary changed:

- security issue!
+ When screen is locked the top bar with apps shows

** Information type changed from Private Security to Public

-- 
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to gnome-shell in Ubuntu.
https://bugs.launchpad.net/bugs/1951098

Title:
  When screen is locked the top bar with apps shows

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/gnome-shell/+bug/1951098/+subscriptions


-- 
desktop-bugs mailing list
desktop-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/desktop-bugs

[Bug 1942542] Re: gedit causes loss of extended attributes (xattrs)

2021-09-23 Thread Marc Deslauriers
** Also affects: gedit via
   https://gitlab.gnome.org/GNOME/gedit/-/issues/464
   Importance: Unknown
   Status: Unknown

** Changed in: gedit (Ubuntu)
   Status: New => Confirmed

-- 
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to gedit in Ubuntu.
https://bugs.launchpad.net/bugs/1942542

Title:
  gedit causes loss of extended attributes (xattrs)

To manage notifications about this bug go to:
https://bugs.launchpad.net/gedit/+bug/1942542/+subscriptions


-- 
desktop-bugs mailing list
desktop-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/desktop-bugs

[Bug 1944464] Re: gnome-screensaver locked screen leaks text to underlying windows

2021-09-23 Thread Marc Deslauriers
** Information type changed from Private Security to Public Security

** Changed in: gnome-screensaver (Ubuntu)
   Status: New => Triaged

-- 
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to gnome-screensaver in Ubuntu.
https://bugs.launchpad.net/bugs/1944464

Title:
  gnome-screensaver locked screen leaks text to underlying windows

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/gnome-screensaver/+bug/1944464/+subscriptions


-- 
desktop-bugs mailing list
desktop-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/desktop-bugs

[Bug 1935690] Re: Lock Screen Failure - Desktop Contents Momentarily Visible

2021-08-10 Thread Marc Deslauriers
** Package changed: unity (Ubuntu) => gnome-shell (Ubuntu)

** Changed in: gnome-shell (Ubuntu)
   Status: New => Triaged

-- 
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to gnome-shell in Ubuntu.
https://bugs.launchpad.net/bugs/1935690

Title:
  Lock Screen Failure - Desktop Contents Momentarily Visible

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/gnome-shell/+bug/1935690/+subscriptions


-- 
desktop-bugs mailing list
desktop-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/desktop-bugs

[Bug 1929304] Re: file-roller / gnome archive manager fails to extract

2021-06-04 Thread Marc Deslauriers
** Also affects: gnome-autoar (Ubuntu Bionic)
   Importance: Undecided
   Status: New

** Also affects: gnome-autoar (Ubuntu Impish)
   Importance: Low
 Assignee: Sebastien Bacher (seb128)
   Status: Fix Committed

** Also affects: gnome-autoar (Ubuntu Focal)
   Importance: Undecided
   Status: New

** Also affects: gnome-autoar (Ubuntu Hirsute)
   Importance: Undecided
   Status: New

** Also affects: gnome-autoar (Ubuntu Groovy)
   Importance: Undecided
   Status: New

** Changed in: gnome-autoar (Ubuntu Bionic)
 Assignee: (unassigned) => Marc Deslauriers (mdeslaur)

** Changed in: gnome-autoar (Ubuntu Focal)
 Assignee: (unassigned) => Marc Deslauriers (mdeslaur)

** Changed in: gnome-autoar (Ubuntu Groovy)
 Assignee: (unassigned) => Marc Deslauriers (mdeslaur)

** Changed in: gnome-autoar (Ubuntu Hirsute)
 Assignee: (unassigned) => Marc Deslauriers (mdeslaur)

** Changed in: gnome-autoar (Ubuntu Bionic)
   Status: New => In Progress

** Changed in: gnome-autoar (Ubuntu Focal)
   Status: New => In Progress

** Changed in: gnome-autoar (Ubuntu Groovy)
   Status: New => In Progress

** Changed in: gnome-autoar (Ubuntu Hirsute)
   Status: New => Incomplete

** Changed in: gnome-autoar (Ubuntu Hirsute)
   Status: Incomplete => In Progress

-- 
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to gnome-autoar in Ubuntu.
https://bugs.launchpad.net/bugs/1929304

Title:
  file-roller / gnome archive manager fails to extract

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/gnome-autoar/+bug/1929304/+subscriptions

-- 
desktop-bugs mailing list
desktop-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/desktop-bugs

[Bug 1912060] Re: [SRU] caribou: Segfault (as regression of xorg CVE-2020-25712 fix) cause security issue for cinnamon

2021-05-14 Thread Marc Deslauriers
Hi, have you had a chance to test the packages as requested in comment
#31 yet? Thanks!

-- 
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to caribou in Ubuntu.
https://bugs.launchpad.net/bugs/1912060

Title:
  [SRU] caribou: Segfault (as regression of xorg CVE-2020-25712 fix)
  cause security issue for cinnamon

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/caribou/+bug/1912060/+subscriptions

-- 
desktop-bugs mailing list
desktop-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/desktop-bugs

[Bug 1925834] Re: BRASERO DOESNT WORK WITH UBUNTU 20.04 NO CD WRITING BACK UP ? WHY

2021-05-07 Thread Marc Deslauriers
Thanks for taking the time to report this bug and helping to make Ubuntu
better. We appreciate the difficulties you are facing, but this appears
to be a "regular" (non-security) bug.  I have unmarked it as a security
issue since this bug does not show evidence of allowing attackers to
cross privilege boundaries nor directly cause loss of data/privacy.
Please feel free to report any other bugs you may find.

** Information type changed from Private Security to Public

-- 
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to brasero in Ubuntu.
https://bugs.launchpad.net/bugs/1925834

Title:
  BRASERO DOESNT WORK WITH UBUNTU 20.04 NO CD WRITING  BACK UP ?  WHY

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/brasero/+bug/1925834/+subscriptions

-- 
desktop-bugs mailing list
desktop-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/desktop-bugs

[Bug 1926093] Re: package gconf-service 3.2.6-6ubuntu1 failed to install/upgrade: problemas de dependência - deixando desconfigurado

2021-05-07 Thread Marc Deslauriers
Thanks for taking the time to report this bug and helping to make Ubuntu
better. We appreciate the difficulties you are facing, but this appears
to be a "regular" (non-security) bug.  I have unmarked it as a security
issue since this bug does not show evidence of allowing attackers to
cross privilege boundaries nor directly cause loss of data/privacy.
Please feel free to report any other bugs you may find.

** Information type changed from Private Security to Public

-- 
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to gconf in Ubuntu.
https://bugs.launchpad.net/bugs/1926093

Title:
  package gconf-service 3.2.6-6ubuntu1 failed to install/upgrade:
  problemas de dependência - deixando desconfigurado

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/gconf/+bug/1926093/+subscriptions

-- 
desktop-bugs mailing list
desktop-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/desktop-bugs

[Bug 1910220] Re: Characters from dead keys shown in plan view in password field on login screen

2021-03-09 Thread Marc Deslauriers
I can reproduce this on Ubuntu 20.04 and Ubuntu 20.10

** Changed in: gnome-shell (Ubuntu)
   Status: New => Confirmed

-- 
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to gnome-shell in Ubuntu.
https://bugs.launchpad.net/bugs/1910220

Title:
  Characters from dead keys shown in plan view in password field on
  login screen

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/gnome-shell/+bug/1910220/+subscriptions

-- 
desktop-bugs mailing list
desktop-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/desktop-bugs

[Bug 1917801] Re: Multi monitor bug opening windows (not responsive to input in the location it is drawn)

2021-03-09 Thread Marc Deslauriers
Thanks for taking the time to report this bug and helping to make Ubuntu
better. We appreciate the difficulties you are facing, but this appears
to be a "regular" (non-security) bug.  I have unmarked it as a security
issue since this bug does not show evidence of allowing attackers to
cross privilege boundaries nor directly cause loss of data/privacy.
Please feel free to report any other bugs you may find.

** Information type changed from Public Security to Public

-- 
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to mutter in Ubuntu.
https://bugs.launchpad.net/bugs/1917801

Title:
  Multi monitor bug opening windows (not responsive to input in the
  location it is drawn)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/mutter/+bug/1917801/+subscriptions

-- 
desktop-bugs mailing list
desktop-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/desktop-bugs

[Bug 1917812] Re: extracting archives from within nautilus omits subfolders

2021-03-08 Thread Marc Deslauriers
** Also affects: gnome-autoar (Ubuntu Bionic)
   Importance: Undecided
   Status: New

** Also affects: gnome-autoar (Ubuntu Xenial)
   Importance: Undecided
   Status: New

** Also affects: gnome-autoar (Ubuntu Focal)
   Importance: Undecided
   Status: New

** Also affects: gnome-autoar (Ubuntu Hirsute)
   Importance: High
   Status: Fix Released

** Also affects: gnome-autoar (Ubuntu Groovy)
   Importance: Undecided
   Status: New

** Changed in: gnome-autoar (Ubuntu Xenial)
   Status: New => In Progress

** Changed in: gnome-autoar (Ubuntu Bionic)
   Status: New => In Progress

** Changed in: gnome-autoar (Ubuntu Xenial)
 Assignee: (unassigned) => Marc Deslauriers (mdeslaur)

** Changed in: gnome-autoar (Ubuntu Bionic)
 Assignee: (unassigned) => Marc Deslauriers (mdeslaur)

** Changed in: gnome-autoar (Ubuntu Focal)
   Status: New => In Progress

** Changed in: gnome-autoar (Ubuntu Focal)
 Assignee: (unassigned) => Marc Deslauriers (mdeslaur)

** Changed in: gnome-autoar (Ubuntu Groovy)
 Assignee: (unassigned) => Marc Deslauriers (mdeslaur)

** Changed in: gnome-autoar (Ubuntu Groovy)
   Status: New => In Progress

** No longer affects: gnome-autoar (Ubuntu Xenial)

-- 
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to gnome-autoar in Ubuntu.
https://bugs.launchpad.net/bugs/1917812

Title:
  extracting archives from within nautilus omits subfolders

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/gnome-autoar/+bug/1917812/+subscriptions

-- 
desktop-bugs mailing list
desktop-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/desktop-bugs

[Bug 1912060] Re: [SRU] caribou: Segfault (as regression of xorg CVE-2020-25712 fix) cause security issue for cinnamon

2021-01-28 Thread Marc Deslauriers
The focal debdiff has an extra commit that the groovy debdiff does't
have, and it doesn't look like that commit is in the upstream repo:

>From 85ac8f9e210243d95163cf8b1013470a6d9c7eaa Mon Sep 17 00:00:00 2001
From: Clement Lefebvre 
Date: Tue, 12 Jan 2021 17:30:25 +
Subject: [PATCH 2/4] Fix subkey popmenu not showing after being dismissed

Could someone please investigate if that commit is needed or not, and
adjust the focal and/or groovy debdiffs as appropriate.

Thanks!

-- 
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to caribou in Ubuntu.
https://bugs.launchpad.net/bugs/1912060

Title:
  [SRU] caribou: Segfault (as regression of xorg CVE-2020-25712 fix)
  cause security issue for cinnamon

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/caribou/+bug/1912060/+subscriptions

-- 
desktop-bugs mailing list
desktop-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/desktop-bugs

[Bug 1913584] Re: passwords openly readable from gnome-keyring-daemon

2021-01-28 Thread Marc Deslauriers
Thanks for taking the time to report this bug and helping to make Ubuntu 
better.  This is not a bug, but rather expected behavior:
https://wiki.ubuntu.com/SecurityTeam/FAQ#gnome-keyring

Please feel free to report any other bugs you may find.

** Information type changed from Private Security to Public

** Changed in: gnome-keyring (Ubuntu)
   Status: New => Invalid

-- 
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to gnome-keyring in Ubuntu.
https://bugs.launchpad.net/bugs/1913584

Title:
  passwords openly readable from gnome-keyring-daemon

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/gnome-keyring/+bug/1913584/+subscriptions

-- 
desktop-bugs mailing list
desktop-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/desktop-bugs

[Bug 1912060] Re: [SRU] caribou: Segfault (as regression of xorg CVE-2020-25712 fix) cause security issue for cinnamon

2021-01-26 Thread Marc Deslauriers
The minimal fix should be published as a security update. Once a groovy
debdiff is available too, ping someone on the security team and we'll
get it built and published. Thanks!

-- 
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to caribou in Ubuntu.
https://bugs.launchpad.net/bugs/1912060

Title:
  [SRU] caribou: Segfault (as regression of xorg CVE-2020-25712 fix)
  cause security issue for cinnamon

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/caribou/+bug/1912060/+subscriptions

-- 
desktop-bugs mailing list
desktop-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/desktop-bugs

[Bug 1905741] Re: poppler 0.62.0-2ubuntu2.11 and 0.41.0-0ubuntu1.15 security updates break Splash output

2020-11-26 Thread Marc Deslauriers
Thanks for reporting this, I'll back out the fix and will release
updates shortly.

** Also affects: poppler (Ubuntu Xenial)
   Importance: Undecided
   Status: New

** Also affects: poppler (Ubuntu Bionic)
   Importance: Undecided
   Status: New

** Changed in: poppler (Ubuntu)
   Status: New => Invalid

** Changed in: poppler (Ubuntu Xenial)
   Status: New => In Progress

** Changed in: poppler (Ubuntu Bionic)
   Status: New => In Progress

** Changed in: poppler (Ubuntu Xenial)
 Assignee: (unassigned) => Marc Deslauriers (mdeslaur)

** Changed in: poppler (Ubuntu Bionic)
 Assignee: (unassigned) => Marc Deslauriers (mdeslaur)

-- 
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to poppler in Ubuntu.
https://bugs.launchpad.net/bugs/1905741

Title:
  poppler 0.62.0-2ubuntu2.11 and 0.41.0-0ubuntu1.15 security updates
  break Splash output

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/poppler/+bug/1905741/+subscriptions

-- 
desktop-bugs mailing list
desktop-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/desktop-bugs

[Bug 1902761] Re: package gdm3 3.36.3-0ubuntu0.20.04.2 failed to install/upgrade: el subproceso instalado paquete gdm3 script post-installation devolvió el código de salida de error 10

2020-11-06 Thread Marc Deslauriers
Thanks for taking the time to report this bug and helping to make Ubuntu
better. We appreciate the difficulties you are facing, but this appears
to be a "regular" (non-security) bug.  I have unmarked it as a security
issue since this bug does not show evidence of allowing attackers to
cross privilege boundaries nor directly cause loss of data/privacy.
Please feel free to report any other bugs you may find.

** Information type changed from Private Security to Public

-- 
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to gdm3 in Ubuntu.
https://bugs.launchpad.net/bugs/1902761

Title:
  package gdm3 3.36.3-0ubuntu0.20.04.2 failed to install/upgrade: el
  subproceso instalado paquete gdm3 script post-installation devolvió el
  código de salida de error 10

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/gdm3/+bug/1902761/+subscriptions

-- 
desktop-bugs mailing list
desktop-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/desktop-bugs

[Bug 1889206] Re: Regression in USN-4436-1

2020-07-29 Thread Marc Deslauriers
** Changed in: librsvg (Ubuntu)
   Status: Confirmed => Invalid

-- 
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to librsvg in Ubuntu.
https://bugs.launchpad.net/bugs/1889206

Title:
  Regression in USN-4436-1

To manage notifications about this bug go to:
https://bugs.launchpad.net/librsvg/+bug/1889206/+subscriptions

-- 
desktop-bugs mailing list
desktop-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/desktop-bugs

[Bug 1889206] Re: Regression in USN-4436-1

2020-07-28 Thread Marc Deslauriers
** Attachment added: "eog displaying issue rendering anglo cardset"
   
https://bugs.launchpad.net/ubuntu/+source/librsvg/+bug/1889206/+attachment/5396555/+files/anglo-issue.png

** Bug watch added: gitlab.gnome.org/GNOME/librsvg/-/issues #612
   https://gitlab.gnome.org/GNOME/librsvg/-/issues/612

** Also affects: librsvg via
   https://gitlab.gnome.org/GNOME/librsvg/-/issues/612
   Importance: Unknown
   Status: Unknown

-- 
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to librsvg in Ubuntu.
https://bugs.launchpad.net/bugs/1889206

Title:
  Regression in USN-4436-1

To manage notifications about this bug go to:
https://bugs.launchpad.net/librsvg/+bug/1889206/+subscriptions

-- 
desktop-bugs mailing list
desktop-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/desktop-bugs

[Bug 1889206] Re: Regression in USN-4436-1

2020-07-28 Thread Marc Deslauriers
Can also be tested by running "eog
/usr/share/aisleriot/cards/anglo.svgz". See attached screenshot.

-- 
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to librsvg in Ubuntu.
https://bugs.launchpad.net/bugs/1889206

Title:
  Regression in USN-4436-1

To manage notifications about this bug go to:
https://bugs.launchpad.net/librsvg/+bug/1889206/+subscriptions

-- 
desktop-bugs mailing list
desktop-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/desktop-bugs

[Bug 1889206] [NEW] Regression in USN-4436-1

2020-07-28 Thread Marc Deslauriers
*** This bug is a security vulnerability ***

Public security bug reported:

The security fix for librsvg introduced a regression in aisleriot.

Steps to reproduce:

1- install gnome-cards-data
2- run "sol" to start Aislerot
3- Switch card layout to "Anglo"
4- Notice some cards are missing graphics

** Affects: librsvg (Ubuntu)
 Importance: Undecided
 Status: New

** Affects: librsvg (Ubuntu Xenial)
 Importance: Undecided
 Assignee: Marc Deslauriers (mdeslaur)
 Status: Confirmed

** Affects: librsvg (Ubuntu Bionic)
 Importance: Undecided
 Assignee: Marc Deslauriers (mdeslaur)
 Status: Confirmed

** Also affects: librsvg (Ubuntu Xenial)
   Importance: Undecided
   Status: New

** Also affects: librsvg (Ubuntu Bionic)
   Importance: Undecided
   Status: New

** Changed in: librsvg (Ubuntu Xenial)
 Assignee: (unassigned) => Marc Deslauriers (mdeslaur)

** Changed in: librsvg (Ubuntu Bionic)
 Assignee: (unassigned) => Marc Deslauriers (mdeslaur)

** Changed in: librsvg (Ubuntu Xenial)
   Status: New => Confirmed

** Changed in: librsvg (Ubuntu Bionic)
   Status: New => Confirmed

-- 
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to librsvg in Ubuntu.
https://bugs.launchpad.net/bugs/1889206

Title:
  Regression in USN-4436-1

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/librsvg/+bug/1889206/+subscriptions

-- 
desktop-bugs mailing list
desktop-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/desktop-bugs

[Bug 1887861] Re: Gnome Lock screen shows old screen before lock screen

2020-07-17 Thread Marc Deslauriers
** Information type changed from Private Security to Public Security

-- 
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to gnome-shell in Ubuntu.
https://bugs.launchpad.net/bugs/1887861

Title:
  Gnome Lock screen shows old screen before lock screen

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/gnome-shell/+bug/1887861/+subscriptions

-- 
desktop-bugs mailing list
desktop-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/desktop-bugs

[Bug 896836] Re: Segmentation fault when asking help() for the list of modules

2020-07-14 Thread Marc Deslauriers
** Information type changed from Public Security to Public

-- 
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to pygtk in Ubuntu.
https://bugs.launchpad.net/bugs/896836

Title:
  Segmentation fault when asking help() for the list of modules

To manage notifications about this bug go to:
https://bugs.launchpad.net/pygtk/+bug/896836/+subscriptions

-- 
desktop-bugs mailing list
desktop-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/desktop-bugs

[Bug 1881780] Re: Nautilus requires SMBv1 to work from "Other Locations" without manually typing in the address.

2020-07-14 Thread Marc Deslauriers
** Information type changed from Public Security to Public

-- 
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to nautilus in Ubuntu.
https://bugs.launchpad.net/bugs/1881780

Title:
  Nautilus requires SMBv1 to work from "Other Locations" without
  manually typing in the address.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/gvfs/+bug/1881780/+subscriptions

-- 
desktop-bugs mailing list
desktop-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/desktop-bugs

[Bug 1882353] Re: Ubuntu Dock and Top bar accessible from lockscreen

2020-07-14 Thread Marc Deslauriers
** Information type changed from Public Security to Public

-- 
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to gnome-shell in Ubuntu.
https://bugs.launchpad.net/bugs/1882353

Title:
  Ubuntu Dock and Top bar accessible from lockscreen

To manage notifications about this bug go to:
https://bugs.launchpad.net/gnome-shell/+bug/1882353/+subscriptions

-- 
desktop-bugs mailing list
desktop-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/desktop-bugs

[Bug 1844853] Re: IBus no longer works in Qt applications after upgrade

2020-03-23 Thread Marc Deslauriers
** Tags removed: verification-needed verification-needed-disco

-- 
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to glib2.0 in Ubuntu.
https://bugs.launchpad.net/bugs/1844853

Title:
  IBus no longer works in Qt applications after upgrade

To manage notifications about this bug go to:
https://bugs.launchpad.net/glib/+bug/1844853/+subscriptions

-- 
desktop-bugs mailing list
desktop-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/desktop-bugs

[Bug 1857122] Re: New Windows are opened below other windows and require extra clicks to acees

2020-03-11 Thread Marc Deslauriers
Thanks for taking the time to report this bug and helping to make Ubuntu
better. We appreciate the difficulties you are facing, but this appears
to be a "regular" (non-security) bug.  I have unmarked it as a security
issue since this bug does not show evidence of allowing attackers to
cross privilege boundaries nor directly cause loss of data/privacy.
Please feel free to report any other bugs you may find.

** Information type changed from Private Security to Public

** Package changed: ubuntu => gnome-shell (Ubuntu)

-- 
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to gnome-shell in Ubuntu.
https://bugs.launchpad.net/bugs/1857122

Title:
  New Windows are opened below other windows and require extra clicks to
  acees

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/gnome-shell/+bug/1857122/+subscriptions

-- 
desktop-bugs mailing list
desktop-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/desktop-bugs

[Bug 1864948] Re: circumflex accent in a password is not hidden properly

2020-03-11 Thread Marc Deslauriers
** Information type changed from Private Security to Public

-- 
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to gnome-terminal in Ubuntu.
https://bugs.launchpad.net/bugs/1864948

Title:
  circumflex accent in a password is not hidden properly

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/gnome-terminal/+bug/1864948/+subscriptions

-- 
desktop-bugs mailing list
desktop-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/desktop-bugs

[Bug 1866899] Re: Snap Store can't install or remove snaps on 20.04 (password prompt issue?)

2020-03-11 Thread Marc Deslauriers
Thanks for taking the time to report this bug and helping to make Ubuntu
better. We appreciate the difficulties you are facing, but this appears
to be a "regular" (non-security) bug.  I have unmarked it as a security
issue since this bug does not show evidence of allowing attackers to
cross privilege boundaries nor directly cause loss of data/privacy.
Please feel free to report any other bugs you may find.

** Information type changed from Private Security to Public

-- 
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to gnome-shell in Ubuntu.
https://bugs.launchpad.net/bugs/1866899

Title:
  Snap Store can't install or remove snaps on 20.04 (password prompt
  issue?)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/gnome-shell/+bug/1866899/+subscriptions

-- 
desktop-bugs mailing list
desktop-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/desktop-bugs

[Bug 1844853] Re: IBus no longer works in Qt applications after upgrade

2020-03-03 Thread Marc Deslauriers
Is anyone actively working on the glib2.0 SRUs? We are blocked on them
for our ibus security update...

-- 
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to glib2.0 in Ubuntu.
https://bugs.launchpad.net/bugs/1844853

Title:
  IBus no longer works in Qt applications after upgrade

To manage notifications about this bug go to:
https://bugs.launchpad.net/glib/+bug/1844853/+subscriptions

-- 
desktop-bugs mailing list
desktop-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/desktop-bugs

[Bug 1855477] Re: gnome-control-center will not let me paste in a password from my password manger

2019-12-11 Thread Marc Deslauriers
** Information type changed from Public Security to Public

-- 
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to gnome-control-center in Ubuntu.
https://bugs.launchpad.net/bugs/1855477

Title:
  gnome-control-center will not let me paste in a password from my
  password manger

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/gnome-control-center/+bug/1855477/+subscriptions

-- 
desktop-bugs mailing list
desktop-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/desktop-bugs

[Bug 1855157] Re: these bugs are stop me to do some specifing task like my screenlock doesn't working

2019-12-11 Thread Marc Deslauriers
Thanks for taking the time to report this bug and helping to make Ubuntu
better. We appreciate the difficulties you are facing, but this appears
to be a "regular" (non-security) bug.  I have unmarked it as a security
issue since this bug does not show evidence of allowing attackers to
cross privilege boundaries nor directly cause loss of data/privacy.
Please feel free to report any other bugs you may find.

** Information type changed from Private Security to Public

-- 
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to gnome-shell in Ubuntu.
https://bugs.launchpad.net/bugs/1855157

Title:
  these bugs are stop me to do some specifing task like my screenlock
  doesn't working

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/gnome-shell/+bug/1855157/+subscriptions

-- 
desktop-bugs mailing list
desktop-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/desktop-bugs

[Bug 1716013] Re: Printers should not be auto-added without permission from user

2019-10-18 Thread Marc Deslauriers
** Changed in: gnome-settings-daemon (Ubuntu)
   Status: New => Confirmed

-- 
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to gnome-settings-daemon in Ubuntu.
https://bugs.launchpad.net/bugs/1716013

Title:
  Printers should not be auto-added without permission from user

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/gnome-settings-daemon/+bug/1716013/+subscriptions

-- 
desktop-bugs mailing list
desktop-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/desktop-bugs

[Bug 1791405] Re: bluetooth always in discoverable mode (security issue)

2019-10-18 Thread Marc Deslauriers
** Changed in: bluez (Ubuntu)
   Status: New => Confirmed

-- 
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to gnome-bluetooth in Ubuntu.
https://bugs.launchpad.net/bugs/1791405

Title:
  bluetooth always in discoverable mode (security issue)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/bluez/+bug/1791405/+subscriptions

-- 
desktop-bugs mailing list
desktop-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/desktop-bugs

[Bug 1771196] Re: daap plugin opens port by default

2019-09-17 Thread Marc Deslauriers
While Rhythmbox does indeed open a port when started, the user needs to
start it before the port becomes available. This is no different than
opening a Bittorrent client application, or some other application that
opens ports.

That being said, perhaps the plugin should be disabled by default.

Thanks!

** Changed in: rhythmbox (Ubuntu)
   Status: New => Confirmed

-- 
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to rhythmbox in Ubuntu.
https://bugs.launchpad.net/bugs/1771196

Title:
   daap plugin opens port by default

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/rhythmbox/+bug/1771196/+subscriptions

-- 
desktop-bugs mailing list
desktop-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/desktop-bugs

[Bug 1780365] Re: Credentials located in gnome-keyring can be compromised easily

2019-09-17 Thread Marc Deslauriers
** Changed in: gnome-keyring (Ubuntu)
   Status: New => Confirmed

** Changed in: gnome-keyring (Ubuntu)
   Importance: Undecided => Low

-- 
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to gnome-keyring in Ubuntu.
https://bugs.launchpad.net/bugs/1780365

Title:
  Credentials located in gnome-keyring can be compromised easily

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/gnome-keyring/+bug/1780365/+subscriptions

-- 
desktop-bugs mailing list
desktop-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/desktop-bugs

[Bug 1797161] Re: GNOME Image Viewer (EOG): invalid XPM file causes dynamic memory allocation

2019-09-17 Thread Marc Deslauriers
** Changed in: eog (Ubuntu)
   Status: New => Incomplete

** Changed in: eog (Ubuntu)
   Status: Incomplete => Invalid

** Changed in: gdk-pixbuf (Ubuntu)
   Status: New => Confirmed

-- 
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to eog in Ubuntu.
https://bugs.launchpad.net/bugs/1797161

Title:
  GNOME Image Viewer (EOG): invalid XPM file causes dynamic memory
  allocation

To manage notifications about this bug go to:
https://bugs.launchpad.net/gdk-pixbuf/+bug/1797161/+subscriptions

-- 
desktop-bugs mailing list
desktop-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/desktop-bugs

[Bug 1797012] Re: Fingerprint login can be changed without authentication

2019-09-17 Thread Marc Deslauriers
*** This bug is a duplicate of bug 1532264 ***
https://bugs.launchpad.net/bugs/1532264

I am going to mark this as a dupe of bug 1532264 since it looks to be
the same root cause. Thanks!

** Information type changed from Private Security to Public Security

** This bug has been marked a duplicate of bug 1532264
   fprintd allows unauthorized root access

-- 
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to libfprint in Ubuntu.
https://bugs.launchpad.net/bugs/1797012

Title:
  Fingerprint login can be changed without authentication

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/fprintd/+bug/1797012/+subscriptions

-- 
desktop-bugs mailing list
desktop-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/desktop-bugs

[Bug 1841713] Re: It is unlocking the screen when I type my password when caps lock is on

2019-09-17 Thread Marc Deslauriers
Hi,

Are you able to reproduce this with a freshly installed Ubuntu?

Thanks!

** Package changed: gnome-screensaver (Ubuntu) => gnome-shell (Ubuntu)

** Information type changed from Private Security to Public Security

** Changed in: gnome-shell (Ubuntu)
   Status: New => Incomplete

-- 
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to gnome-shell in Ubuntu.
https://bugs.launchpad.net/bugs/1841713

Title:
  It is unlocking the screen when I type my password when caps lock is
  on

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/gnome-shell/+bug/1841713/+subscriptions

-- 
desktop-bugs mailing list
desktop-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/desktop-bugs

[Bug 1842668] Re: Workspace view is showing before unlocking 19.04

2019-09-17 Thread Marc Deslauriers
** Package changed: ubuntu => gnome-shell (Ubuntu)

** Information type changed from Private Security to Public Security

** Changed in: gnome-shell (Ubuntu)
   Status: New => Confirmed

-- 
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to gnome-shell in Ubuntu.
https://bugs.launchpad.net/bugs/1842668

Title:
  Workspace view is showing before unlocking 19.04

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/gnome-shell/+bug/1842668/+subscriptions

-- 
desktop-bugs mailing list
desktop-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/desktop-bugs

[Bug 1843718] Re: I can change password of one administrator from other

2019-09-17 Thread Marc Deslauriers
Closing this bug as per previous comment. Thanks!

** Changed in: gnome-control-center (Ubuntu)
   Status: New => Invalid

-- 
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to gnome-control-center in Ubuntu.
https://bugs.launchpad.net/bugs/1843718

Title:
  I can change password of one administrator from other

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/gnome-control-center/+bug/1843718/+subscriptions

-- 
desktop-bugs mailing list
desktop-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/desktop-bugs

[Bug 1819406] Re: Found broken a feature for fingerprint image obfuscation

2019-06-28 Thread Marc Deslauriers
** Changed in: libfprint (Ubuntu)
   Status: New => Confirmed

** Changed in: libfprint (Ubuntu)
   Importance: High => Low

** Changed in: libfprint (Ubuntu)
   Importance: Low => High

** Also affects: libfprint via
   https://gitlab.freedesktop.org/libfprint/fprintd/issues/16
   Importance: Unknown
   Status: Unknown

** Changed in: libfprint (Ubuntu)
   Importance: High => Low

-- 
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to libfprint in Ubuntu.
https://bugs.launchpad.net/bugs/1819406

Title:
  Found broken a feature for fingerprint image obfuscation

To manage notifications about this bug go to:
https://bugs.launchpad.net/libfprint/+bug/1819406/+subscriptions

-- 
desktop-bugs mailing list
desktop-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/desktop-bugs

[Bug 1828116] Re: Password works uppercase and lowercase

2019-06-28 Thread Marc Deslauriers
** Changed in: gdm3 (Ubuntu)
   Status: New => Incomplete

-- 
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to gnome-shell in Ubuntu.
https://bugs.launchpad.net/bugs/1828116

Title:
  Password works uppercase and lowercase

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/gdm3/+bug/1828116/+subscriptions

-- 
desktop-bugs mailing list
desktop-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/desktop-bugs

[Bug 1797161] Re: GNOME Image Viewer (EOG): invalid XPM file causes dynamic memory allocation

2019-03-07 Thread Marc Deslauriers
** Bug watch added: gitlab.gnome.org/GNOME/gdk-pixbuf/issues #95
   https://gitlab.gnome.org/GNOME/gdk-pixbuf/issues/95

** Also affects: choreographics via
   https://gitlab.gnome.org/GNOME/gdk-pixbuf/issues/95
   Importance: Unknown
   Status: Unknown

** Project changed: choreographics => gdk-pixbuf

** Information type changed from Private Security to Public Security

-- 
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to eog in Ubuntu.
https://bugs.launchpad.net/bugs/1797161

Title:
  GNOME Image Viewer (EOG): invalid XPM file causes dynamic memory
  allocation

To manage notifications about this bug go to:
https://bugs.launchpad.net/gdk-pixbuf/+bug/1797161/+subscriptions

-- 
desktop-bugs mailing list
desktop-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/desktop-bugs

[Bug 1815602] Re: [SRU] Update epiphany-browser to 3.28.5 in Bionic

2019-03-07 Thread Marc Deslauriers
** Changed in: epiphany-browser (Ubuntu)
   Status: New => Confirmed

-- 
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to epiphany-browser in Ubuntu.
https://bugs.launchpad.net/bugs/1815602

Title:
  [SRU] Update epiphany-browser to 3.28.5 in Bionic

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/epiphany-browser/+bug/1815602/+subscriptions

-- 
desktop-bugs mailing list
desktop-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/desktop-bugs

[Bug 1818357] Re: Screen not locked when coming out of suspend/hibernate

2019-03-07 Thread Marc Deslauriers
** Package changed: gnome-screensaver (Ubuntu) => gnome-shell (Ubuntu)

** Information type changed from Private Security to Public Security

-- 
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to gnome-shell in Ubuntu.
https://bugs.launchpad.net/bugs/1818357

Title:
  Screen not locked when coming out of suspend/hibernate

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/gnome-shell/+bug/1818357/+subscriptions

-- 
desktop-bugs mailing list
desktop-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/desktop-bugs

[Bug 1773561] Re: Xenial/16.04: GIMP needs a security update - unfixed issues (CVE-2017: 17784-17789).

2019-02-14 Thread Marc Deslauriers
** Information type changed from Private Security to Public Security

-- 
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to gimp in Ubuntu.
https://bugs.launchpad.net/bugs/1773561

Title:
  Xenial/16.04: GIMP needs a security update - unfixed issues (CVE-2017:
  17784-17789).

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/gimp/+bug/1773561/+subscriptions

-- 
desktop-bugs mailing list
desktop-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/desktop-bugs

[Bug 1772919] Re: pam-gnome-keyring.so reveals user’s password credential as a plaintext form

2019-02-14 Thread Marc Deslauriers
** Also affects: gnome-keyring (Ubuntu Xenial)
   Importance: Undecided
   Status: New

** Also affects: gnome-keyring (Ubuntu Trusty)
   Importance: Undecided
   Status: New

** Changed in: gnome-keyring (Ubuntu)
   Status: New => Fix Released

** Changed in: gnome-keyring (Ubuntu Trusty)
   Status: New => Confirmed

** Changed in: gnome-keyring (Ubuntu Xenial)
   Status: New => Confirmed

-- 
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to gnome-keyring in Ubuntu.
https://bugs.launchpad.net/bugs/1772919

Title:
  pam-gnome-keyring.so reveals user’s password credential as a plaintext
  form

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/gnome-keyring/+bug/1772919/+subscriptions

-- 
desktop-bugs mailing list
desktop-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/desktop-bugs

[Bug 1808908] Re: Screen not locked when coming out of suspend/hibernate

2019-01-18 Thread Marc Deslauriers
Are you able to reproduce this issue at will?

It sounds like there is something wrong with your authentication
settings. Did you install fingerprint reader software, or are you
connected to an LDAP directory?

** Package changed: gnome-screensaver (Ubuntu) => gnome-shell (Ubuntu)

** Changed in: gnome-shell (Ubuntu)
   Status: New => Incomplete

-- 
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to gnome-shell in Ubuntu.
https://bugs.launchpad.net/bugs/1808908

Title:
  Screen not locked when coming out of suspend/hibernate

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/gnome-shell/+bug/1808908/+subscriptions

-- 
desktop-bugs mailing list
desktop-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/desktop-bugs

[Bug 1803059] Re: Nullpointer dereference

2018-12-04 Thread Marc Deslauriers
The upstream commit was assigned CVE-2018-19149.

** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2018-19149

-- 
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to poppler in Ubuntu.
https://bugs.launchpad.net/bugs/1803059

Title:
  Nullpointer dereference

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/poppler/+bug/1803059/+subscriptions

-- 
desktop-bugs mailing list
desktop-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/desktop-bugs

[Bug 828756] Re: getting "connection is untrusted" warnings

2018-12-03 Thread Marc Deslauriers
This is an ancient bug and likely no longer applies to recent releases.
As such, I am closing it.

If anyone is still hitting this issue with current releases, please file
a new bug.

** Changed in: ca-certificates-java (Ubuntu)
   Status: Confirmed => Invalid

** Changed in: empathy (Ubuntu)
   Status: Incomplete => Invalid

** Changed in: icedtea-web (Ubuntu)
   Status: Confirmed => Invalid

-- 
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to empathy in Ubuntu.
https://bugs.launchpad.net/bugs/828756

Title:
  getting "connection is untrusted" warnings

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/ca-certificates-java/+bug/828756/+subscriptions

-- 
desktop-bugs mailing list
desktop-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/desktop-bugs

[Bug 1800426] Re: gnome-screensaver only locks the screen a moment after resuming from standby

2018-11-01 Thread Marc Deslauriers
*** This bug is a duplicate of bug 1532508 ***
https://bugs.launchpad.net/bugs/1532508

Ok, then it's not gnome-screensaver. Gnome uses the shell to do screen
locking. Thanks.

** Information type changed from Private Security to Public Security

** This bug has been marked a duplicate of bug 1532508
   Screen contents revealed briefly on resume, before even unlocking

-- 
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to gnome-screensaver in Ubuntu.
https://bugs.launchpad.net/bugs/1800426

Title:
  gnome-screensaver only locks the screen a moment after resuming from
  standby

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/gnome-screensaver/+bug/1800426/+subscriptions

-- 
desktop-bugs mailing list
desktop-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/desktop-bugs

[Bug 1800308] Re: return from lock is extremely slow

2018-11-01 Thread Marc Deslauriers
** Package changed: ubuntu => gnome-shell (Ubuntu)

** Information type changed from Private Security to Public Security

** Changed in: gnome-shell (Ubuntu)
   Status: New => Triaged

-- 
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to gnome-shell in Ubuntu.
https://bugs.launchpad.net/bugs/1800308

Title:
  return from lock is extremely slow

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/gnome-shell/+bug/1800308/+subscriptions

-- 
desktop-bugs mailing list
desktop-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/desktop-bugs

[Bug 1800333] Re: Ubuntu dock not working properly

2018-11-01 Thread Marc Deslauriers
Thanks for taking the time to report this bug and helping to make Ubuntu
better. We appreciate the difficulties you are facing, but this appears
to be a "regular" (non-security) bug.  I have unmarked it as a security
issue since this bug does not show evidence of allowing attackers to
cross privilege boundaries nor directly cause loss of data/privacy.
Please feel free to report any other bugs you may find.

** Information type changed from Private Security to Public

** Package changed: systemd (Ubuntu) => gnome-shell-extension-ubuntu-
dock (Ubuntu)

-- 
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to gnome-shell-extension-ubuntu-dock
in Ubuntu.
https://bugs.launchpad.net/bugs/1800333

Title:
  Ubuntu dock not working properly

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/gnome-shell-extension-ubuntu-dock/+bug/1800333/+subscriptions

-- 
desktop-bugs mailing list
desktop-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/desktop-bugs

[Bug 1790609] Re: Update evince to 3.28.4

2018-10-31 Thread Marc Deslauriers
We did update ghostscript, but I suspect there will be many more issues
discovered in the future.

Ideally, we'd keep postscript disabled, but I do understand postscript
documents are still being used by our users and disabling postscript
support would be viewed as a regression. As such, I think we can re-
enable it for now but keep the option to turn it off if it becomes
problematic again in the future.

-- 
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to evince in Ubuntu.
https://bugs.launchpad.net/bugs/1790609

Title:
  Update evince to 3.28.4

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/evince/+bug/1790609/+subscriptions

-- 
desktop-bugs mailing list
desktop-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/desktop-bugs

[Bug 263660] Re: display on screen'CONSTRUCTING MOLECULES'every thing shuts down all the time, then restart.thanhs gugs.cheers.

2018-10-04 Thread Marc Deslauriers
** This bug is no longer a duplicate of bug 106060
   [r128 1002:5446] Selecting the Molecule screensaver makes the PC freeze. It 
is completely unresponsive.

-- 
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to gnome-screensaver in Ubuntu.
https://bugs.launchpad.net/bugs/263660

Title:
  display on screen'CONSTRUCTING MOLECULES'every thing shuts down all
  the time,then restart.thanhs gugs.cheers.

To manage notifications about this bug go to:
https://bugs.launchpad.net/launchpad/+bug/263660/+subscriptions

-- 
desktop-bugs mailing list
desktop-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/desktop-bugs

  1   2   3   4   5   6   7   8   9   10   >